Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3lbK4F5fivglEyKl2FWM_9NvfNY.roa
File: 3lbK4F5fivglEyKl2FWM_9NvfNY.roa (raw, json)
Hash identifier: UWESHxagGyGGQGm3Q0PG1AO6O8Mtb1KyECY0D7XYQm0=
Subject key identifier: DE:56:CA:E0:5E:5F:8A:F8:25:13:22:A5:D8:55:8C:FF:D3:6F:7C:D6
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A0B435DBED6C8EE6F4E83726053D3B5592
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3lbK4F5fivglEyKl2FWM_9NvfNY.roa
Signing time: Fri 18 Sep 2026 11:10:23 +0000
ROA not before: Fri 18 Sep 2026 11:10:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.206.16.0/24 maxlen: 24
82.206.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:35:db:ed:6c:8e:e6:f4:e8:37:26:05:3d:3b:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 18 11:10:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de56cae05e5f8af8251322a5d8558cffd36f7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:e4:02:ac:0b:a4:dd:39:55:2c:ed:03:0d:
28:7f:a6:c8:ee:bc:6f:c5:9e:ef:6e:66:5a:7d:ea:
b9:43:db:a5:76:e8:ea:94:b9:95:d5:eb:98:bf:a2:
94:c5:17:8b:c3:84:37:6f:c7:c0:45:18:a5:82:38:
42:64:ae:f7:cd:c4:5e:f0:f7:58:0c:28:96:7f:23:
94:30:cb:9c:17:15:99:e7:77:47:f2:c7:54:87:2d:
b8:32:3c:97:0d:21:69:5a:9e:e7:6f:c1:38:69:32:
68:2d:ee:e6:89:62:ce:2f:a1:00:cc:70:56:0f:e6:
83:5c:26:95:eb:9a:7c:a9:1f:64:5c:52:a7:eb:18:
c5:84:74:6e:2d:4f:79:87:9a:45:08:03:e4:9a:00:
81:df:db:cb:0c:c9:61:2f:5d:8a:3f:8c:11:42:44:
6f:bc:d1:86:f4:12:73:a2:29:32:5f:5a:39:4a:a4:
d1:5c:f3:64:85:96:f2:e1:5a:31:a5:18:59:35:21:
6e:3e:21:6a:55:6d:e1:df:4c:b1:47:ea:e8:18:a4:
98:94:d1:08:31:dc:e6:68:d2:7d:d1:d8:bb:a6:30:
25:1c:79:85:d1:6a:d1:a0:03:0a:5d:4c:8e:36:50:
77:0a:e9:bf:72:b8:a8:d0:eb:7a:ce:8a:7c:b8:5d:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:CA:E0:5E:5F:8A:F8:25:13:22:A5:D8:55:8C:FF:D3:6F:7C:D6
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3lbK4F5fivglEyKl2FWM_9NvfNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.16.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:38:2b:f2:89:d7:26:24:06:42:61:75:73:c5:50:cf:72:d6:
67:7d:aa:28:2c:4b:ee:02:81:93:0f:d5:08:92:1c:34:b5:1a:
92:11:04:a6:df:7e:80:2f:bc:99:c3:04:11:b9:b5:03:e8:f7:
3d:bb:3b:ce:b1:40:eb:5b:a6:26:e8:3c:ff:8c:1b:64:52:26:
97:cc:c8:83:6a:14:f8:47:9d:b7:af:70:cb:c0:82:30:57:da:
21:f8:4b:98:05:ad:a3:3e:88:9b:77:14:38:e8:76:c4:94:38:
aa:1d:02:0d:17:22:2f:10:56:c4:06:17:f4:87:92:88:fe:d1:
1c:11:de:26:42:54:f1:63:fc:c5:76:ed:47:e5:eb:d6:61:e0:
01:39:c7:69:8e:4c:8e:c7:d6:4b:1d:5c:46:69:78:d6:7a:f0:
ea:43:f7:9a:08:81:16:b7:dc:48:f7:3f:9b:f3:79:44:69:55:
60:0f:18:c3:3b:31:dc:97:e7:42:00:8b:bd:aa:75:81:1c:30:
f6:6a:eb:df:42:9a:cb:cc:cb:60:a0:61:00:bc:57:26:6c:1d:
46:f9:17:d9:e2:61:09:b1:59:e3:69:9a:b1:63:1a:39:48:0a:
a7:e1:29:e8:c1:48:0c:95:5d:bd:2c:5f:ad:64:e5:91:35:02:
b5:30:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:21 2026 by rpki-client